On Tue, May 3, 2011 at 5:55 PM, Amos Jeffries <squid3_at_treenet.co.nz> wrote:
> On Tue, 3 May 2011 12:13:14 -0700, Mark Bassett wrote:
>>
>> http://wiki.squid-cache.org/Features/DynamicSslCert>>
>> Which version of squid actually has this code in it? Â I have tried
>> squid-3.1.12 Â and squid-3.2.0.7 (I was not able to get 3.2 to compile
>> cleanly)
>>
>> Squid-3.1.12 does not accept these parameters
>> generate-host-certificates=on dynamic_cert_mem_cache_size=4MB, I get an
>> error about bungled squid.conf
>>
>> Ssl-bump is working just fine, but since the name of the cert doesn't
>> match the domain, we always get cert errors. Â These can be bypassed in
>> the tools that we use by turning off certificate verification, but I'd
>> like to get this working with DynamicSSLCert.
>>
>> Thanks!
>
> 3.1.12.1 and 3.2.0.7. Slightly broken in both. Patches are winding their way
> slowly through QA in trunk as you noticed, when that is done being checked
> the release branches snapshots will have them.
>
> Amos
>
Received on Wed May 04 2011 - 02:51:51 MDT